Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: /gvS/xgOknwTOr1QYqK6s0KrWVgicSqxJBLtgTR/6Yw=
Subject key identifier: 38:BC:CB:3C:00:3D:B6:5C:01:80:D1:5E:0C:47:F5:A1:C7:D1:A7:27
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 01A128E87EAAE2038CCCAEECC6161C996A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 03:01:27 +0000
Manifest this update: Sun 11 Oct 2026 03:01:27 +0000
Manifest next update: Mon 12 Oct 2026 03:01:27 +0000
Files and hashes: 1: A4GalviEuSvDRygo_-qVl6eCT10.roa (hash: sSlPwV0yRve9+trsnROr061h+b28t0Ygn3kbHKwNHiA=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: CelRSUCaP5ssPK2W2c7HoBVlQ3qe9+u7p8vNJqPbKpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:7e:aa:e2:03:8c:cc:ae:ec:c6:16:1c:99:6a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Oct 11 03:01:27 2026 GMT
Not After : Oct 12 03:01:27 2026 GMT
Subject: CN=38bccb3c003db65c0180d15e0c47f5a1c7d1a727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:78:34:21:b5:1b:2e:be:43:0d:ce:e3:54:
a1:45:92:cc:d9:3d:07:0a:0c:f7:9c:32:ca:b3:41:
25:2f:8a:eb:e2:89:44:99:d0:3e:45:b0:56:12:70:
e4:ff:25:06:45:cb:48:df:a4:71:86:f3:e3:0d:bb:
ea:92:4f:b4:80:86:4b:61:af:37:8e:d7:e7:4c:b1:
ee:f3:f6:0d:9c:b0:58:31:c6:3e:52:40:5a:7e:d0:
54:91:86:c8:63:3e:06:e2:4d:39:4a:67:13:57:11:
ac:77:64:1a:e7:f1:d1:29:87:b2:f4:be:d8:9f:33:
23:df:a6:7a:97:a4:17:e9:41:cb:5a:95:0e:de:ef:
12:1b:15:3b:3b:dc:30:34:41:5e:6d:f7:53:95:c0:
d4:08:a2:5f:2e:9b:65:c3:c9:f7:e8:81:9c:a4:87:
4f:9f:97:66:73:18:d6:0a:c2:f0:b1:b1:c2:30:63:
c8:58:f0:51:cd:7c:aa:4d:c3:5b:2c:80:37:23:1f:
fc:4a:48:1d:aa:f5:65:7c:7f:bf:4b:f9:55:2c:1f:
3e:75:0e:f7:39:f9:a6:db:dc:62:af:79:01:ce:56:
fd:ac:4d:1a:19:86:ed:fc:00:ba:a1:3a:45:8d:a0:
70:4c:0e:de:c9:7b:17:c5:c0:d7:fd:c0:25:b5:5b:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BC:CB:3C:00:3D:B6:5C:01:80:D1:5E:0C:47:F5:A1:C7:D1:A7:27
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b3:3c:c2:e0:36:c1:49:e8:e0:94:8f:27:cb:55:51:46:db:
42:ac:4e:42:04:6a:2b:fc:cf:00:07:ef:3c:8c:bd:1c:0b:22:
99:c1:2f:30:f1:61:68:3d:42:53:a8:2c:cd:75:02:64:ee:7c:
8a:a7:c2:b3:15:e5:dc:cf:fd:d1:30:1d:7b:af:2d:20:bd:62:
74:e4:c4:46:0f:52:16:91:6e:ed:1a:51:5c:7b:70:c6:7e:7c:
5e:03:b3:5c:ab:10:c1:49:2d:23:21:00:72:ef:72:69:fe:3e:
09:b2:9d:58:0d:cb:14:57:32:b8:ec:7a:8d:f5:cb:27:0d:12:
98:94:8b:de:18:f7:27:a2:b1:9c:32:a4:ea:68:8d:6b:6a:3f:
ff:d8:bd:cf:4a:9e:f0:7f:39:cd:29:28:4e:cc:45:75:40:e6:
98:e7:1e:ed:f2:e1:b7:4b:c7:05:46:60:ff:d3:f6:19:ef:b1:
e6:e3:99:c4:83:7a:6c:a6:17:4f:b4:b5:07:66:28:d8:63:47:
36:3a:06:58:ee:12:c4:06:46:97:a7:4b:09:c4:98:75:d1:b7:
b5:30:a0:c1:d8:42:cd:a8:95:8a:b3:a9:e7:dd:35:81:ef:66:
22:72:dc:e5:cb:dc:cb:ec:82:27:29:37:2f:cf:32:63:91:00:
0a:8a:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:22:48 2026 by rpki-client